Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          JoyIHf9MSB6lD6nUfcQHOiaczEHlLYWfwWY8n42hTCQ=
Subject key identifier:   D5:95:BB:39:D5:A3:C2:36:3A:E0:1D:64:C5:3C:78:59:27:32:39:70
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       2E955AB8E5BB649F170BBB8EC9EF8B3674574556
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS14618.roa
Signing time:             Thu 08 Sep 2022 06:49:07 +0000
ROA not before:           Thu 08 Sep 2022 06:44:07 +0000
ROA not after:            Thu 07 Sep 2023 06:49:07 +0000
asID:                     14618
IP address blocks:        216.122.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:95:5a:b8:e5:bb:64:9f:17:0b:bb:8e:c9:ef:8b:36:74:57:45:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep  8 06:44:07 2022 GMT
            Not After : Sep  7 06:49:07 2023 GMT
        Subject: CN=D595BB39D5A3C2363AE01D64C53C785927323970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:54:b6:51:aa:19:e6:f2:23:a6:62:93:cc:
                    aa:53:5d:35:c9:89:3d:a3:e5:5e:a7:c5:59:af:ef:
                    7a:aa:2e:4d:dd:f4:d7:b3:e0:65:5e:b1:78:e3:08:
                    1f:d0:2c:e3:1a:01:df:2f:93:ef:0c:4a:48:94:62:
                    94:b4:fb:a3:d6:13:4b:41:6a:a9:a0:d1:ef:87:14:
                    fa:f7:6a:6c:bd:07:46:9b:1c:cb:5d:7d:a2:f1:70:
                    1f:f9:44:8b:11:35:86:49:59:c0:3f:d0:3f:6e:ea:
                    07:ea:2b:dc:6d:a8:06:3f:5b:18:40:ee:fb:04:cb:
                    00:89:f6:d2:1f:85:b2:da:d9:1e:e7:a2:08:7f:3e:
                    9a:d8:35:b2:bd:ee:dd:fd:8b:c4:92:33:3b:df:67:
                    24:d4:24:7f:53:c7:e6:c1:52:1e:51:2b:c7:29:8b:
                    3c:21:5e:4d:0a:b5:04:39:43:8c:60:72:7c:18:8c:
                    29:15:ed:74:8c:0d:1e:9f:3b:64:b4:65:0b:82:c8:
                    73:a6:c6:d6:bd:ef:c7:6e:e5:07:cf:99:d4:e7:cf:
                    7f:8a:e9:2b:51:ac:68:e3:cf:d6:32:b5:34:52:0f:
                    95:d5:3d:74:62:06:fa:a6:1f:18:e1:cc:c1:f0:cb:
                    b0:da:ac:a4:cc:ad:b9:94:84:03:85:eb:cf:5b:2e:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:BB:39:D5:A3:C2:36:3A:E0:1D:64:C5:3C:78:59:27:32:39:70
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dc:56:03:da:18:56:c6:a1:83:3e:34:f6:54:76:ed:49:45:7f:
         ad:31:a7:51:68:ff:52:06:b1:f9:70:a8:cd:1d:89:74:47:85:
         7d:ec:c9:6d:54:92:ab:c0:f3:00:dd:cb:59:19:58:6f:37:7c:
         d6:75:7e:e3:97:d9:b0:5a:70:a6:9a:f1:42:52:33:e8:cb:28:
         ea:29:40:7d:dd:0a:22:82:fc:3c:ec:44:21:9a:cf:77:09:24:
         fe:c9:c3:8e:6b:a8:bc:10:74:29:67:63:c1:9b:b4:93:a2:e4:
         5a:95:d8:e6:55:f4:79:f6:c0:3c:09:ce:1c:59:41:b2:8b:a5:
         93:a5:34:68:c9:a8:54:83:10:3f:e5:e5:c3:65:4b:7c:aa:88:
         cc:2d:6d:54:e3:99:6d:a5:86:7f:f7:16:4b:97:27:81:61:0c:
         f8:aa:51:c8:87:a4:e5:c0:04:45:fa:85:be:94:6b:f5:40:11:
         ec:a2:82:c8:68:43:5b:44:76:7b:1e:fb:a8:8d:18:9d:d6:bc:
         e5:c0:6c:a1:35:67:34:99:d5:f1:b1:27:e5:ff:e4:8e:7e:e1:
         0d:cb:7b:c9:86:b3:d1:8b:73:c0:0c:7a:71:bb:31:c5:92:5a:
         9f:a5:61:78:b6:80:fc:dc:b4:3f:79:8a:b6:64:c3:2d:29:5a:
         6e:8c:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org